fix(orchestration): exclude rolled-back work from bounded recovery

[saphid]

Runtime recovery skips unfinished command, tool and subagent items owned by rolled-back runs. Orphaned items whose run is missing remain recovery candidates. Both SQL and memory selection use the existing bounded recovery API.

Head cdbc6f812 is rebuilt on V2 3aa47e294 with the shared test-only prerequisite #10865. Merge #10865 first; this topic changes three recovery files. The regression includes 1,000 settled shells and one recovery candidate.

Validation: 31 focused projection, recovery and turn-control tests pass across four files. Scoped server typecheck and targeted formatting, lint and diff checks pass. New-head CI is pending. No live database was accessed. SQL retains pending/running outbox recovery; the memory store has no persisted outbox and makes no outbox-parity claim.

Independent review remains unavailable: the direct Claude Opus 5 high launcher exited 1 with expired OAuth before inference. No Claude review occurred.

Targets Orchestrator V2 in #2829. Updated with GPT-6 in Codex/T3.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 95edbe02-5ef5-4aa8-bf6b-fc452c4cc56d

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

Dismissing prior approval to re-evaluate cdbc6f8